Presumably they are referring to length extension attacks. You can't pull them off if you truncate. https://en.m.wikipedia.org/wiki/Length_extension_attack

Generally though length ext attacks have a solution - HMAC, which is much more secure than truncate.

The more you truncate, the more vulnerable you are to birthday attacks (practically speaking you would have to truncate quite a lot)